DESCRIPTION 

PROGRAM EXECUTION DEVICE 

Technical Field 

5 [0001] The present invention relates to a program execution 
device which executes a program and manages the operation of the 
program. The present invention particularly relates to execution of 
an alternative program during abnormal termination of a program, 
in a digital television. 

10 

Background Art 

[0002] In recent years, specifications for digital television are 
being formulated, and with this, an STB (Set Top Box) which is 
compliant with each of the specifications is being developed. 

15 [0003] In the OCAP 1.0 specification (OCAP1.0 Profile 

OC-SP-OCAP1.0-IF-I09-031121), which is a specification for North 
American cable broadcasting, various services (for example, an 
interactive program) can be provided by distributing to respective 
homes, not only video and audio, but also the applications attached 

20 to such video and audio. In addition, an application (for example, 
an electronic program guide) prepared by a broadcast operator can 
also be operated in an STB. 

[0004] The "downloading of data" in patent reference 1 
describes a method for downloading, from a broadcast wave (in 

25 other words, an MPEG2 transport stream), an application related to 
a broadcast and executing the downloaded application. With the 
technology described in patent reference 1, it becomes possible to 
distribute, not only video and audio, but also applications to 
respective homes. 

30 [0005] Furthermore, the "method and apparatus for managing 

an application in accordance with application life cycle" in patent 
reference 2 describes a technology for application operation 



management. In the OCAP 1.0 specification, the management of 
life cycles of distributed individual applications is made possible with 
the use of the technology described in patent reference 2. 
[0006] Furthermore, the OCAP 1.0 specification stipulates that, 
5 in the case where an application prepared by a broadcast operator 
exists at the time of STB activation, the application prepared by the 
broadcast operator must be activated, as well as reactivated in the 
case where the application prepared by the broadcast operator 
abnormally terminates. 

10 [0007] By using the conventional technology, it becomes 
possible, after downloading and executing an application, to monitor 
the life cycle of the application and detect abnormal termination. 
In addition, it becomes possible to re-execute an application that 
abnormally terminates. 

15 Patent Reference 1: Japanese Translation of PCT International 
Application laid open as JP2001-519627 

Patent Reference 2: Japanese Translation of PCT International 
Application laid open as JP2003-504753 

20 Disclosure of Invention 

Problems that Invention is to Solve 

[0008] However, since the conventional technology 
re-executes the application that abnormally terminated, there is a 
high probability abnormal termination will occur again, and this 
25 becomes a cause for a loss of convenience for a viewer viewing a 
program using an STB. 

[0009] As such, the present invention was conceived in view of 
the aforementioned circumstances, and has as an object to provide 
a program execution device which is capable, even in the case where 
30 a currently executed application (program) abnormally terminates, 
of preventing the application from becoming unusable, and thereby 
improving user convenience. 
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Means to Solve the Problems 

[0010] In order to achieve the aforementioned object, the 
program execution device according to the present invention is a 
5 program execution device that executes a program, the program 
execution device including: a first program selection unit which 
selects, as a program to be executed, a program which is 
downloaded and executed; a program monitoring unit which 
monitors an operational state of a currently executed program; a 

10 second program selection unit which selects, as the program to be 
executed, a program that is of the same type as the currently 
executed program, in the case where abnormal termination of the 
currently executed program is detected by the program monitoring 
unit; and an execution unit which executes the program selected by 

15 the first program selection unit and, in the case where abnormal 
termination of the currently executed program is detected by the 
program monitoring unit, executes the program selected by the 
second program selection unit. Accordingly, even when the 
currently executed program abnormally terminates, it is possible to 

20 maintain a situation in which the program is always operating, by 
executing a program which is of the same type as the program which 
abnormally terminated. Here, a program of the same type refers to 
a program having the same function of, for example, displaying an 
electronic program guide, and different user operability or display 

25 characteristics such as the amount of information in the display 
information and the display format. Moreover, in programs of the 
same type, the same program as the program that abnormally 
terminated is also included. 

[0011] Furthermore, it is also possible that the second 
30 program selection unit selects, as the program to be executed, a 
program which is different from the program selected by the first 
program selection unit. Accordingly, it is possible to execute a 
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different program that is of the same type as the program that 
abnormally terminated. 

[0012] Furthermore, it is also possible that the program 
execution device, further includes: a cause obtainment unit which 
5 obtains a cause of the abnormal termination of the program 
detected by the program monitoring unit; and a countermeasure 
execution unit which executes a countermeasure based on the cause 
of the abnormal termination, wherein the second program selection 
unit selects, as the program to be executed, a program which is the 

10 same as the program selected by the first program selection unit, 
and the execution unit executes the program selected by the second " 
program selection unit, after the countermeasure is executed by the 
countermeasure execution unit. Accordingly, it is possible to 
execute, once again, the same program as the program that 

15 abnormally terminated. 

[0013] Furthermore, it is also possible that the second 
program selection unit selects, as the program to be executed: a 
program which is the same as the program selected by the first 
program selection unit, in the case where a predetermined condition 

20 is not satisfied; and a program which is different from the program 
selected by the first program selection unit, in the case where the 
predetermined condition is satisfied. Accordingly, it becomes 
possible to activate the same program as the initial program only for 
a fixed period and, subsequently, execute a different program. 

25 [0014] Furthermore, it is also possible that the program 
monitoring unit, upon detecting abnormal termination of the 
currently executed program, presents an occurrence of the 
abnormal termination to a user. Accordingly, it becomes possible 
for the user to recognize that abnormal termination of the currently 

30 executed program has occurred. 

[0015] Furthermore, it is also possible that the second 
program selection unit selects the program based on an instruction 
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from a user. Accordingly, it becomes possible to execute the 
program instructed by the user. 

[0016] Furthermore, it is also possible that the second 
program selection unit presents selectable program candidates, and 
5 selects a program selected by the user, as the program to be 
executed. Accordingly, it becomes possible to execute the program 
selected by the user. Likewise, it becomes easy for the user to 
determine the program to be executed. 

[0017] Furthermore, it is also possible that the second 
10 program selection unit selects a predetermined program, as the 
program, in the case where the user does not make a selection 
within a predetermined time. Accordingly, it becomes possible to 
select a program even when the selection by the user is not made 
within a predetermined period of time. 
15 [0018] Note that the present invention can be realized not only 
as such a program execution apparatus but also as a program 
execution method having the characteristic units of such a program 
execution apparatus as steps, and as a program which causes a 
computer to execute such steps. In addition, it goes without saying 
20 that it is possible to distribute such a program via a recording 
medium such as a CD-ROM, a transmission medium such as the 
internet, and so on. 

Effects of the Invention 

25 [0019] According to the program execution device in the 
present invention, even when a currently executed program 
abnormally terminates, it is possible to maintain a situation in which 
the program is always operating, by executing a program which is 
the same, or of the same type, as the program which abnormally 

30 terminated. 

Brief Description of Drawings 
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[0020] FIG. 1 ts configuration diagram of the first embodiment of a 
cable television system according to the present invention. 

FIG. 2 shows an example of the usage of frequency bands 
used for communications between the head end and terminal 
5 apparatuses in the cable television system according to the present 
invention. 

FIG. 3 shows an example of the usage of frequency bands 
used for communications between the head end and the terminal 
apparatuses in the cable television system according to the present 
10 invention. 

FIG. 4 shows an example of the usage of frequency bands 
used for communications between the head end and the terminal 
apparatuses in the cable television system according to the present 
invention. 

15 FIG. 5 is a configuration diagram showing a configuration of a 

terminal apparatus in the cable television system according to the 
present invention. 

FIG. 6 shows an example of an external view of the terminal 
apparatus in the cable television system according to the present 

20 invention. 

FIG. 7 is a configuration diagram showing the hardware 
configuration of a POD according to the present invention. 

FIG. 8 is a structure diagram showing a structure of a 
program stored in the POD according to the present invention. 
25 FIG. 9 is a structure diagram of a packet defined in the MPEG 

standard. 

FIG. 10 is a diagram showing an example of an MPEG2 
transport stream. 

FIG. 11 is a diagram showing an example of an external view 
30 in the case where the input unit is configured in the form of a front 
panel. 

FIG. 12 is a structure diagram showing a structure of the 
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program stored in a terminal apparatus according to the present 
invention. 

FIG. 13(a) shows an example of an on-screen display 
displayed by a display according to the present invention; (b) shows 
5 an example of an on-screen display displayed by the display 
according to the present invention. 

FIG. 14 is a diagram showing an example of information 
stored in the secondary storage unit according to the present 
invention. 

10 FIG. 15 is a diagram showing an example of information 

stored in a primary storage unit 511 according to the present 
invention. 

FIG. 16 is a schematic diagram showing the details of a PAT 
specified in the MPEG2 standard according to the present invention. 
15 FIG. 17 is a schematic diagram showing the details of a PMT 

specified in the MPEG2 standard according to the present invention. 

FIG. 18 is a schematic diagram showing the details of an AIT 
specified in OCAP 1.0 specification according to the present 
invention. 

20 FIG. 19 is a schematic diagram showing the file system 

transmitted in the DSMCC format according to the present 
invention. 

FIG. 20 is a schematic diagram showing details of the XAIT 

according to the present invention. 
25 FIG. 21 is a configuration diagram of the MA management unit 

according to the present invention. 

FIG. 22 is a flowchart showing the operation when the MA 

management unit performs the activation of a monitor application in 

the first embodiment. 
30 FIG. 23 is a flowchart showing the operation when the 

activated monitor application abnormally terminates at an 

unforeseen timing, in the first embodiment. 
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FIG. 24 is a flowchart showing the operation when, in the case 
where a monitor application abnormaliy terminates, the MA 
management unit stores and transmits the details of the abnormal 
termination, in the first embodiment. 
5 FIG. 25 is a fiowchart showing the operation when an MA 

selection unit B re-selects the same program as the selection result 
of an MA selection unit A, in the second embodiment. 

FIG. 26(a) is a diagram schematically representing the data 
stored in the primary storage unit, in the second embodiment; (b) is 
10 a diagram schematically representing the data stored in the primary 
storage unit, in the second embodiment; (c) is a diagram 
schematically representing the data stored in the primary storage 
unit, in the second embodiment. 

FIG. 27 is a fiowchart showing the operation when the MA 
is selection unit B re-seiects the same program as the selection result 
of the MA selection unit A 2103 up to the Nth time and selects a 
different program from the N + lth time onward, in the third 
embodiment. 

FIG. 28 is a fiowchart showing the operation when a list of 
20 selection candidate programs is presented to the user and the user 
is made to select, in the fourth embodiment. 

FIG. 29 is a diagram schematically representing an example 
of a list of programs that can be selected as an alternative program, 
in the fourth embodiment. 
25 FIG. 30 is a diagram showing an example of a display 

presented to the user, in the fourth embodiment. 

FIG. 31 is a diagram showing an example of a method of 
displaying to the user, in the fifth embodiment. 

FIG. 32 is a diagram showing an example of a method of 
30 displaying to the user, in the fifth embodiment. 

FIG. 33 is a schematic diagram showing details of the XAIT 
according to the present invention. 
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FIG. 34 is an exampie of a message prompting the purchase 
of a program, according to the present invention 

FIG. 35 is an example of the appearance of the storage of a 
Java ® program according to the present invention. 
5 FIG. 36 is an example of the on-screen display by the display 

according to the present invention. 

FIG. 37 is a flowchart summarizing the operation of the POD 
Lib in the case where a Java ® program is registered in the POD Lib. 

FIG. 38 is a schematic diagram showing the change of 
10 destination of the message delivery with the POD according to the 
present invention. 

FIG. 39 is a schematic diagram showing the change of 
destination of the message delivery with the POD according to the 
present invention. 

15 FIG. 40 is a flowchart summarizing the operation of the POD 

Lib in the case where the POD Lib cancels the registration of a Java 
® program, according to the present invention. 

FIG. 41 is a configuration diagram for processing in the case 
where the Java ® program abnormally terminates, according to the 
20 present invention. 

FIG. 42 is a flow chart showing the process in the case where 
the Java ® program abnormally terminates, according to the 
present invention. 

FIG. 43 is a flow chart showing the process in the case where 
25 the Java ® program abnormally terminates, according to the 
present invention. 

FIG. 44 is a flow chart showing the process in the case where 
the Java ® program abnormally terminates, according to the 
present invention. 

30 

Numerical References 

[0021] 1200 Program 
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1201 


OS 


1201a 


Kerne! 


1201b 


Library 


1202 


EPG 


1202a 


TV show display unit 


1202b 


Reproduction unit 


1203 


VM 


1204 


Service manager 


1205 


Library 


1205a 


JMF 


1205b 


AM 


1205c 


Tuner 


1205d 


CA 


1205e 


POD Lib 


1205f 


MA management unit 



Best Mode for Carrying Out the Invention 

[0022] Hereinafter, the embodiments of the present invention 

are described with reference to the diagrams. 

20 (First Embodiment) 

An embodiment of the cable television system in the present 
invention shall be described with reference to the diagram. FIG. 1 
is a block diagram representing the relationship of apparatuses 
making up a cable system. The cable system includes a head end 

25 101, and three terminal apparatuses, namely a terminal apparatus 
Alll, a terminal apparatus B112, and a terminal apparatus C113. 
In the present embodiment, three terminal apparatuses are 
connected to one head end. However, the present invention can be 
carried out even with an arbitrary number of terminal apparatuses 

30 being connected to the head end. 

[0023] The head end 101 transmits, to plural terminal 
apparatuses, broadcast signals such as video, audio and data, and 
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receives data transmitted from the terminal apparatuses. In order 
to realize this, frequency bands are divided for use in data 
transmission between the head end 101, and the terminal apparatus 
Alll, the terminal apparatus B112, and the terminal apparatus 
5 C113. FIG. 2 is a table showing an example of the division of 
frequency bands. The frequency bands are broadly divided into two 
types: Out of Band (to be abbreviated as OOB) and In-Band, A 
frequency band of 5~130MHz is allocated to OOB to be mainly used 
for data exchange between the head end 101, and the terminal 

10 apparatus Alll, the terminal apparatus B112, and the terminal 
apparatus C113. A frequency band of 130MHz~864MHz is allocated 
to In-Band to be mainly used for broadcast channels including video 
and audio. QPSK is employed for OOB, whereas QAM54 is 
employed for In-Band as modulation techniques. A detailed 

15 description of modulation techniques is omitted here, since they are 
publicly known techniques which are less related to the present 
invention. FIG. 3 shows a more specific example of how the OOB 
frequency band is used. A frequency band of 70MHz~74MHz is 
used to transmit data from the head end 101. In this case, all of 

20 the terminal apparatus Alll, the terminal apparatus B112, and the 
terminal apparatus C113 receive the same data from the head end 
101. Meanwhile, a frequency band of 10.0MHz~10.1MHz is used to 
transmit data from the terminal apparatus Alll to the head end 101. 
A frequency band of 10.1MHz~10.2MHz is used to transmit data 

25 from the terminal apparatus B112 to the head end 101. A 
frequency band of 10.2MHz~10.3MHz is used to transmit data from 
the terminal apparatus C113 to the head end 101. Accordingly, 
data which is unique to each terminal apparatus can be transmitted 
to the head end 101 from the terminal apparatus Alll, the terminal 

30 apparatus B112, and the terminal apparatus C113. FIG. 4 shows 
an example use of the In-Band frequency band. Frequency bands 
of 150~156MHz and 156~l62MHz are allocated respectively to a 
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television channel 1 and a television channel 2, and the subsequent 
frequencies are allocated to television channels at 6MHz intervals. 
310MHz and the subsequent frequencies are allocated to radio 
channels at 1MHz intervals. Each of the above channels may be 
5 used either for analog broadcasting or digital broadcasting. In the 
case of digital broadcasting, data is transmitted in the transport 
packet format compliant with the MPEG2 specification, in which case 
data intended for various data broadcasting systems can be 
transmitted, in addition to audio and video data. 

10 [0024] The head end 101 is equipped with a QPSK modulation 
unit, a QAM modulation unit, and the like in order to transmit 
suitable broadcast signals to the respective frequency ranges. 
Moreover, the head end 101 is equipped with a QPSK demodulation 
unit for receiving data from the terminal apparatuses. Also, the 

15 head end 101 is assumed to be further equipped with various 
devices related to the above modulation units and demodulation unit. 
However, detailed descriptions for these are omitted here, since the 
present invention is mainly related to the terminal apparatuses. 
[0025] The terminal apparatus Alll, the terminal apparatus 

20 B112, and the terminal apparatus C113 receive and reproduce 
broadcast signals transmitted from the head end 101. Furthermore, 
the terminal apparatus Alll, the terminal apparatus B112, and the 
terminal apparatus C113 transmit data unique to each terminal 
apparatus to the head end 101. In the present embodiment, these 

25 three terminal apparatuses have the same configuration. 

[0026] FIG. 5 is a block diagram showing a hardware 
configuration of the terminal apparatus. A terminal apparatus 500 
includes a QAM demodulation unit 501, a QPSK demodulation unit 
502, a QPSK modulation unit 503, a TS decoder 505, an audio 

30 decoder 506, a audio output unit 507, a video decoder 508, a display 
509, a secondary storage unit 510, a primary storage unit 511, a 
ROM 512, an input unit 513, and a CPU 514. Furthermore, □ POD 
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504 can be attached to/detached from the terminal apparatus 500. 
[0027] FIG. 6 shows a flat panel television which is an example 
of the external appearance of the terminal apparatus 500. 

A terminal apparatus 601 contains within its housing, all 
5 constituent elements of the terminal apparatus 500 except for the 
POD 504. 

[0028] A display 602 corresponds to the display 509 in FIG. 5. 

A front panel unit 603 is configured of piural buttons, and 
corresponds to the input unit 513 in FIG. 5. 

10 [0029] A signal input terminal 604 is connected with a cable 
line in order to perform transmission and reception of signals to and 
from the head end 101. In addition, the signal input terminal 604 
is connected to the QAM demodulation unit 501, the QPSK 
demodulation unit 502, and the QPSK modulation unit 503 in FIG. 5. 

15 [0030] A pod card 605 corresponds to the POD 504 in FIG. 5. 
The POD 504, as in the POD card 605 in FIG. 6, is embodied 
independently of the terminal apparatus 500 and can be attached 
to/detached from the terminal apparatus 500. Details of the POD 
504 are described later. 

20 [0031] An insertion slot 604 is an insertion slot into which the 
POD card 603 is inserted. 

Referring to FIG. 5, the QAM demodulation unit 501 
demodulates a signal which has been QAM-modulated in and 
transmitted from the head end 101, according to tuning information 

25 that includes a frequency specified by the CPU 514, and passes the 
result to the POD 504. 

[0032] The QPSK demodulation unit 502 demodulates a signal 
which has been QPSK-modulated in and transmitted from the head 
end 101, according to tuning information that includes a frequency 
30 specified by the CPU 514, and passes the result to the POD 504. 
[0033] The QPSK modulation unit 503 QPSK-modulates the 
signal passed from the POD 504, according to modulation 
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information that includes a frequency specified by the CPU 514, and 
transmits the result to the head end 101. 

[0034] As shown in FIG. 6, the POD 504 is detachable from the 

main body of the terminal apparatus 500. The definition of the 
s connection interface between the main body of the terminal 500 and 
the POD 504 is given in the OpenCable (R) HOST-POD Interface 
Specification (OC-SP-HOSTPOD-IF-I12-030210) and specifications 
referred to by such specification. Here, a detailed description is 
omitted, and a description is given only for portions relevant to the 

io present invention, 

[0035] FIG. 7 is a block diagram showing an internal 
configuration of the POD 504. The POD 504 is made up of a first 
descrambler unit 701, a second descrambler unit 702, a scrambler 
unit 703, a primary storage unit 704, a secondary storage unit 705, 

15 and a CPU 706. 

[0036] The first descrambler unit 701, under instruction from 
the CPU 706, receives a scrambled signal from the QAM 
demodulation unit 501 of the terminal apparatus 500 and 
descrambles such signal. Then, the first descrambler unit 701 

20 transmits the descrambled signal to the TS decoder 505 of the 
terminal apparatus 500. Information required for decoding such as 
a key is provided by the CPU 706 as necessary. More specifically, 
the head end 101 broadcasts several pay channels, and when the 
user purchases the right to view these pay channels, the first 

25 descrambler unit 701 receives required information such as a key 
from the CPU 706 and performs descrambling, and the user is able to 
view these pay channels. When required information such as a key 
is not provided, the first descrambler unit 701 passes the received 
signal directly to the TS decoder 505 without performing 

30 descrambling. 

[0037] The second descrambler unit 702, under instruction 
from the CPU 706, receives a scrambled signal from the QPSK 
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demodulation unit 502 of the terminal apparatus 500 and 
descrambles such signal. Then, the second descrambler unit 702 
passes the descrambled data to the CPU 706. 
[0038] The scrambler unit 703, under instruction from the CPU 
5 706, scrambles the data received from the CPU 706 and sends the 
result to the QPSK modulation unit 503 of the terminal apparatus 
500. 

[0039] The primary storage unit 704, specifically made up of a 
primary memory such as a RAM, is utilized for storing data 

io temporarily when the CPU 706 performs processing. 

[0040] The secondary storage unit 705, specifically made up of 
a secondary storage memory such as a flash ROM, is utilized for 
storing a program to be executed by the CPU 706 as well as for 
storing data which should not be deleted even when the power is 

15 turned off. 

[0041] The CPU 706 executes the program stored in the 
secondary storage unit 705. The program is made up of plural 
subprograms. FIG. 8 shows an example of the program stored by 
the secondary storage unit 705. In FIG. 8, a program 800 is made 

20 up of plural subprograms including a main program 801, an 
initialization subprogram 802, a network subprogram 803, a 
reproduction subprogram 804, and a PPV subprogram 805. 
[0042] Here, PPV, which is an abbreviation of Pay Per View, 
refers to a service that allows the user to view a certain program 

25 such as a movie, on a charge basis. When the user enters his 
personal identification number, the purchase of the right to view the 
program is notified to the head end 101, scrambling is cancelled, 
and such program can be viewed by the user. With this viewing, the 
user is required to pay the purchase fee at a later date. 

30 [0043] The main program 801, which is the subprogram 
activated first by the CPU 706 when the power is turned on, controls 
the other subprograms. 
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[0044] The initialization subprogram 802, which is activated 
by the main program 801 when the power is turned on, performs 
information exchange with the terminal apparatus 500 and performs 
initialization. The details of this initialization is defined in detail in 
5 the OpenCable (R) HOST-POD Interface Specification 
(OOSP-HOSTPOD-IF-I12-030210) and in specifications referred to 
by such specification. Furthermore, the initialization subprogram 
802 also performs initialization not defined in these specifications. 
Here, a part of such initialization is introduced. When the power is 

io turned on, the initialization subprogram 802 notifies the QPSK 
demodulation unit 502 of a first frequency stored in the secondary 
storage unit 705 via the CPU 514 of the terminal apparatus 500. 
The QPSK demodulation unit 502 performs tuning using the provided 
first frequency, and transmits the resulting signal to the secondary 

15 scrambler unit 702. Moreover, the initialization subprogram 802 
provides the secondary descrambler unit 702 with descrambling 
information such as a first key stored in the secondary storage unit 
705. As a result, the secondary descrambler unit 702 performs 
descrambling and passes the result to the CPU 706 executing the 

20 initialization subprogram 802. As such, the initialization 
subprogram 802 can receive the information. In the present 
embodiment, the initialization subprogram 802 receives information 
via the network subprogram 803. A detailed description on this is 
given later. 

25 [0045] Furthermore, the initialization subprogram 802 notifies 
the QPSK modulation unit 503 of a second frequency stored in the 
secondary storage unit 705 via the CPU 514 of the terminal 
apparatus 500. The initialization subprogram 802 provides the 
scrambler unit 703 with scrambling information stored in the 

30 secondary storage unit 705. When the initialization subprogram 
802 provides, via the network subprogram 803, the scrambler unit 
703 with information required to be sent, the scrambler unit 703 
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scrambles the data using the provided scrambling information, and 
provides the scrambled data to the QPSK modulation unit 503. The 
QPSK modulation unit 503 modulates the scrambled information 
which it received, and sends the modulated information to the head 
5 end 101. 

[0046] As a result, it becomes possible for the initialization 
subprogram 802 to carry out two-way communication with the head 
end 101 via the terminal apparatus 500, the secondary descrambler 
unit 702, the scrambler unit 703, and the network subprogram 803. 
10 [0047] Furthermore, the initialization subprogram 802 
performs the activation of a privileged program, based on special 
program information transmitted by the head end 101. Details 
shall be described later. 

[0048] The network subprogram 803, which is used by plural 

15 subprograms such as the main program 801 and the initialization 
subprogram 802, is a subprogram intended for carrying out a 
two-way communication with the head end 101. More specifically, 
the network subprogram 803 behaves as if other subprograms using 
the network subprogram 803 were carrying out a two-way 

20 communication with the head end 101 in accordance with TCP/IP. A 
detailed description of TCP/IP is omitted here, since it is a publicly 
known technique for specifying the protocols to be used when 
exchanging information between plural terminals. When activated 
by the initialization subprogram 802 at power-on time, the network 

25 subprogram 803 notifies, via the terminal apparatus 500, the head 
end 101 of an MAC address (an abbreviation of Media Access Control 
address) which is an identifier for identifying the POD 504 and which 
is stored in the secondary storage unit 705 beforehand, so as to 
request for the obtainment of an IP address. The head end 101 

30 notifies the POD 504 of the IP address via the terminal apparatus 
500, and the network subprogram 803 stores such IP address in the 
primary storage unit 704. From here on, the head end 101 and the 
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POD 504 communicate with each other using such IP address as the 
identifier of the POD 504. 

[0049] The reproduction subprogram 804 provides the first 
descrambler unit 701 with descrambiing information such as a 
s second key stored in the secondary storage unit 705 as well as 
descrambiing information such as a third key provided by the 
terminal apparatus 500, so as to allow descrambiing to be 
performed. Furthermore, the reproduction subprogram 804 
receives, via the network subprogram 803, information indicating 

10 that the signal inputted in the first descrambler unit 701 is a PPV 
channel. On the notification that the signal is a PPV channel, the 
reproduction subprogram 804 activates the PPV subprogram 805. 
[0050] Upon being activated, the PPV subprogram 805 
displays, on the terminal apparatus 500, a message that prompts 

15 the user to purchase the program, and accepts an input from the 
user. More specifically, when information intended to be displayed 
on the screen is sent to the CPU 514 of the terminal apparatus 500, 
a program running on the CPU 514 of the terminal apparatus 500 
displays the message on the display 509 of the terminal apparatus 

20 500. Then, when the user enters the personal identification 
number via the input unit 513 of the terminal apparatus 500, the 
CPU 514 of the terminal apparatus 500 accepts it, and sends it to the 
PPV subprogram 805 running on the CPU 706 of the POD 504. The 
PPV subprogram 805 sends, to the head end 101, the accepted 

25 personal identification number via the network subprogram 803. 
When such personal identification number is valid, the head end 101 
notifies, via the network subprogram 803, the PPV subprogram 805 
of descrambiing information required for descrambiing such as a 
fourth key. The PPV subprogram 805 provides the first descrambler 

30 unit 701 with the accepted descrambiing information such as the 
fourth key, and then the first descrambler unit 701 descrambles the 
signal being inputted. 
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[0051] Referring to FIG. 5, the TS decoder 505 performs 
filtering on the signal accepted from the POD 504, and passes 
necessary data to the audio decoder 506, the video decoder 508, 
and the CPU 514. Here, the signal sent from the POD 504 is an 
5 MPEG2 transport stream. A detailed description about an MPEG2 
transport stream is given in the MPEG specification ISO/IEC13818-1, 
and therefore detailed description is omitted in the present 
embodiment. An MPEG2 transport stream is composed of plural 
fixed-length packets, and a packet ID is assigned to each packet. 

10 FIG. 9 is a diagram showing the structure of a packet. 900 is a 
packet structured by 188 bytes having fixed length. The top four 
bytes is a header 901 storing information for identifying the packet, 
and the remaining 184 bytes is a payioad 902 which contains the 
information to be transmitted. 903 shows the breakdown of the 

15 header 901. A packet ID is included in the 13 bits of the twelfth to 
twenty-fourth bits from the top. FIG. 10 is a schematic diagram 
illustrating piural packet strings to be transmitted. A packet 1001 
carries a packet ID "1" in its header and includes the first 
information of video A in its payioad. A packet 1002 carries a 

20 packet ID "2" in its header and includes the first information of audio 
A in its payioad, A packet 1003 carries a packet ID "3" in its header 
and includes the first information of audio B in its payioad. 
[0052] A packet 1004 carries the packet ID "1" in its header 
and includes the second information of the video A in its payioad, 

25 and is the continuation of the packet 1001. Similarly, packets 1005, 
1026, and 1027 carry follow-on data of the other packets. By 
concatenating the contents of the payioads of packets with the same 
packet IDs in the above manner, it is possible to reproduce a 
continuing video and audio. 

30 [0053] Referring to FIG. 10, when the CPU 514 indicates, to 
the TS decoder 505, the packet ID "1" as weli as "the video decoder 
508" as an output destination, the TS decoder 505 extracts packets 
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with the packet ID "1" from the MPEG2 transport stream received 
from the POD 504, and passes them to the video decoder 508. In 
FIG. 11, therefore, only the video data is passed over to the video 
decoder 508. At the same time, when the CPU 514 indicates, to the 
5 TS decoder 505, the packet ID "2" as well as "the audio decoder 506", 
the TS decoder 505 extracts packets with the packet ID "2" from the 
MPEG2 transport stream received from the POD 504, and passes 
them to the audio decoder 506. In FIG. 11, only the audio data is 
passed over to the audio decoder 506. 

to [0054] This process of extracting only necessary packets 
according to the packet IDs corresponds to the filtering performed 
by the TS decoder 505. The TS decoder 505 is capable of 
simultaneously performing plural filtering operations instructed by 
the instruction of the CPU 514. 

15 [0055] Referring to FIG. 5, the audio decoder 506 
concatenates audio data embedded in the packets in the MPEG2 
transport stream provided by the TS decoder 505, performs 
digital-to-analog conversion on the concatenated data, and outputs 
the result to the audio output unit 507. 

20 [0056] The audio output unit 507 outputs the signal provided 
by the audio decoder 506. 

The video decoder 508 concatenates video data embedded in 
the packets in the MPEG2 transport stream provided by the TS 
decoder 505, performs digital-to-analog conversion on the 

25 concatenated data, and outputs the result to the display 509. 

[0057] The display 506, specifically made up of a Braun tube 
or liguid crystal, outputs the video signal provided by the video 
decoder 508, and displays a message instructed by the CPU 514. 
[0058] The secondary storage unit 510, specifically made up of 

30 a flash memory or a hard disk and the like, stores and deletes data 
and programs specified by the CPU 514. The stored data and 
programs are referred to by the CPU 514. The stored data and 
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programs are kept in storage even when power to the terminal 
apparatus 500 is cut off. 

[0059] The primary storage unit 511, specifically made up of a 
RAM and the like, temporarily stores and deletes data and programs 
5 specified by the CPU 514. Stored data and programs are referred 
to by the CPU 514. The stored data and programs are deleted when 
power to the terminal apparatus 500 is cut off. 
[0060] The ROM 512 is a read-only memory device, 
specifically made up of are a ROM, a CD-ROM, or a DVD, and the like. 

10 The ROM 512 stores a program to be executed by the CPU 514. 
[0061] The input unit 513, specifically made up of a front pane! 
or remote control, accepts an input from the user. FIG. 11 shows 
an example of the input unit 513 in the case where it is configured in 
the form of a front panel. 1100 is a front panel, and corresponds to 

15 the front panel unit 603 shown in FIG. 6. The front panel 1100 
includes seven buttons, namely, an up-cursor button 1101, a 
down-cursor button 1102, a left-cursor button 1103, a right-cursor 
button 1104, an OK button 1105, a cancel button 1106, and an EPG 
button 1107. When the user presses down a button, the identifier 

20 of such pressed button is notified to the CPU 514. 

[0062] The CPU 514 executes the program stored in the ROM 
512. Following the instructions from such program to be executed, 
the CPU 514 controls the QAM demodulation unit 501, the QPSK 
demodulation unit 502, the QPSK modulation unit 503, the POD 504, 

25 the TS decoder 505, the display 509, the secondary storage unit 510, 
the primary storage unit 511, and the ROM 512. 
[0063] FIG. 12 is an example of a structure diagram of a 
program stored in the ROM 512 and executed by the CPU 514. 
[0064] A program 1200 is configured of plural subprograms, 

30 specifically, an OS 1201, an EPG 1202, a Java ® VM 1203 
(hereinafter referred to as VM 1203), a service manager 1204, and 
a Java ® library 1205 (hereinafter referred to as library 1205). 
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[0065] The OS 1201 is a subprogram activated by the CPU 514 
when power to the terminal apparatus 500 is turned on. The OS 

1201 stands for operating system, an example of which is Linux and 
the like. The OS 1201 is made up of a kernel 1201a for executing a 

5 subprogram in parallel with another subprogram and of a library 
1201b, and is a generic name for publicly known technology, and 
therefore detaiied explanation is omitted. In the present 
embodiment, the kernel 1201a of the OS 1201 executes the EPG 

1202 and the VM 1203 as subprograms. Meanwhile, the library 
10 1201b provides these subprograms with plural functions required for 

controlling the constituent elements of the terminal apparatus 500. 
[0066] Here, tuning is introduced as an example of such 
functions. In the tuning function, tuning information including a 
frequency is received from another subprogram and then passed 

15 over to the QAM demodulation unit 501. Accordingly, it is possible 
for the QAM demodulation unit 501 to perform demodulation based 
on the provided tuning information, and pass the demodulated data 
to the POD 504. As a result, the other subprograms can control the 
QAM demodulation unit via the library 1201b. 

20 [0067] The EPG 1202 is made up of a program display unit 
1202a for displaying a list of programs to the user as well as for 
accepting an input from the user, and a reproduction unit 1102b for 
selecting channels. Here, EPG is an abbreviation of Electric 
Program Guide. The EPG 1202 gets activated when power to the 

25 terminal apparatus 500 is turned on. In the activated EPG 1202, 
the program display unit 1202a waits for an input from the user via 
the input unit 513 of the terminal apparatus 500. Here, in the case 
where the input unit 513 takes the form of the front panel illustrated 
in FIG. 11, when the user presses down the EPG button 1107 on the 

so input unit 513, the CPU 514 is notified of the identifier of such EPG 
button. The program display unit 1202a of the EPG 1202 which is a 
subprogram running on the CPU 514, accepts this identifier and 
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shows program information on the display 509. FIG. 13(a) and 
FIG. 13(b) show examples of a program tabie displayed on the 
display 509. Referring to FIG. 13(a), the program information is 
displayed on the display 509 in a grid pattern. A column 1301 
5 describes time information. A column 1302 describes a channel 
name "Channel 1" and programs to be broadcast during time periods 
corresponding to the respective times described in the column 1301. 
It is shown that a program "News 9" is broadcast from 9:00 to 10:30, 
and "Cinema AAA" is broadcast from 10:30 to 12:00 on "Channel 1". 

10 A column 1303 describes a channel name "Channel 2" and programs 
to be broadcast during time periods corresponding to the respective 
times described in the column 1301, as in the case of the column 
1302. A program "Cinema BBB" is broadcast from 9:00 to 11:00, 
and "News 11" is broadcast from 11:00 to 12:00. 1330 is a cursor. 

15 The cursor 1330 moves at the press of the left-cursor 1103 or the 
right-cursor 1104 on the front panel 1100. When the right-cursor 
1104 is pressed down in the state illustrated in FIG. 13(a), the 
cursor 1330 moves towards the right as shown in FIG. 13(b). 
Meanwhile, when the left-cursor 1103 is pressed down in the state 

20 illustrated in FIG. 13(b), the cursor 1330 moves towards the left as 
shown in FIG. 13(a). 

[0068] When the OK button 1105 on the front panel 1100 is 
pressed down in the state shown in FIG. 13(a), the program display 
unit 1202a notifies the reproduction unit 1102b of the identifier of 
25 "Channel 1". Meanwhile, when the OK button 1105 on the front 
panel 1100 is pressed down in the state shown in FIG. 13(b), the 
program display unit 1202a notifies the reproduction unit 1102b of 
the identifier of "Channel 2". 

[0069] Furthermore, the program display unit 1202a 
30 periodically stores program information to be displayed from the 
head end 101 into the primary storage unit 511 via the POD 504. 
Generally, it takes time to obtain program information from the head 



-23- 



end. However, it becomes possible to quickly display a program 
table by displaying the program information that is pre-stored in the 
primary storage unit 511 at the press of the EPG button 1107 of the 
input unit 513. 

5 [0070] The reproduction unit 1102b reproduces the channel 
using the received identifier of the channel. The relationship 
between channel identifiers and channels is pre-stored by the 
secondary storage unit 510 as channel information. FIG. 14 shows 
an example of the channel information stored in the secondary 

io storage unit 510. The channel information is stored in tabular form. 
A column 1401 describes the identifiers of channels. A column 
1402 describes channel names. A column 1403 describes tuning 
information. Here, the tuning information is represented by values 
to be provided to the QAM demodulation unit 501 such as frequency, 

15 transmission rate, and coding ratio. A column 1404 describes 
program numbers. Program numbers are numbers used to identify 
PMTs defined by the MPEG2 standard. A description about PMT is 
given later. Each of lines 1411~1414 indicates a set of the 
identifier, channel name, and tuning information of each channel. 

20 The line 1411 describes a set that includes "1" as an identifier, 
"Channel 1" as a channel name, a frequency of "150MHz" as tuning 
information, and "101" as a program number. The reproduction 
unit 1102b passes the identifier of the received channel directly to 
the service manager in order to reproduce the channel. 

25 [0071] Moreover, when the user presses down the up-cursor 
1101 and the down-cursor 1102 on the front pane! 1100 while the 
reproduction is taking place, the reproduction unit 1102b receives a 
notification about such press by the user from the input unit 513 via 
the CPU 514, and switches the channel being reproduced to another 

30 one. First, the reproduction unit 1102b stores, in the primary 
storage unit 511, the identifier of the channel that is currently being 
reproduced. FIG. 15(a), (b), and (c) show example identifiers of 
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channels stored in the primary storage unit 511. FIG. 15(a) shows 
that an identifier "3" is stored, and it is shown by referring to FIG. 14 
that a channel with the channel name "TV 3" is being reproduced. 
When the user presses down the up-cursor 1101 in a state 
5 illustrated in FIG. 15(a), the reproduction unit 1102b refers to the 
channel information shown in FIG. 14, and passes the identifier "2" 
of a channel with the channel name of "Channel 2" to the service 
manager in order to newly reproduce a channel with the channel 
name of "Channel 2", which is the previous channel in the table. At 

10 the same time, the reproduction unit 1102b rewrites the identifier 
into the channel identifier "2" stored in the primary storage unit 511. 
FIG. 15(b) shows such rewritten channel identifier. Meanwhile, 
when the user presses down the down-cursor 1102 in the state 
illustrated in FIG. 15(a), the reproduction unit 1102b refers to the 

15 channel information shown in FIG. 14, and passes the identifier "4" 
of a channel with the channel name of "TV Japan" to the service 
manager in order to newly reproduce a channel with the channel 
name of "TV Japan", which is the next channel in the table. At the 
same time, the reproduction unit 1102b rewrites the identifier into 

20 the channel identifier "4" stored in the primary storage unit 511. 
FIG. 15(c) shows such rewritten channel identifier. 
[0072] The VM 1203 is a Java ® virtual machine that 
sequentially analyzes and executes programs written in the Java ® 
language. Programs written in the Java ® language are compiled 

25 into intermediate codes known as byte codes which do not depend 
on hardware. The Java ® virtual machine is an interpreter that 
executes such byte codes. Some of the Java ® virtual machines 
translate the byte codes into an executable form which can be 
interpreted by the CPU 514 and pass the result to the CPU 514, 

30 which executes it. The VM 1203 gets activated, with a Java ® 
program to be executed being specified by the kerne! 1201a. In the 
present embodiment, the kernel 1201a specifies the service 
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manager 1204 as a Java ® program to be executed. A detailed 
commentary on the Java ® language is given in many books such as 
"Java ® Language Specification" (ISBN 0-201-63451-1). Here, 
detailed description shall be omitted. In addition; detailed 
5 commentary on the operation of the Java ® VM itself is available in 
many books such as "Java ® Virtual Machine Specification" (ISBN 
0-201-63451-X). Here, detailed description shall be omitted. 
[0073] The service manager 1204, which is a Java ® program 
written in the Java ® language, is executed by the VM 1203 

10 sequentially. It is possible for the service manager 1204 to call and 
to be called by another subprogram not written in the Java ® 
language through the JNI (Java ® Native Interface). A 
commentary on the JNI is available in many books such as "Java ® 
Native Interface". Therefore, detailed description shall be omitted 

15 here. 

[0074] The service manager 1204 accepts the identifier of the 
channel from the reproduction unit 1102b through the JNI. 
[0075] First, the service manager 1204 passes the identifier of 
the channel to a Tuner 1205c in the library 1205 so as to request for 

20 tuning. The Tuner 1205c refers to the channel information stored in 
the secondary storage unit 510 to obtain the tuning information. 
Assuming that the service manager 1204 passes the identifier "2" of 
the channel to the Tuner 1205c, the Tuner 1205c refers to the 
column 1412 shown in FIG. 14, and obtains the tuning information 

25 "lSSMHz," corresponding to the channel. The Tuner 1205c passes 
the tuning information to the QAM demodulation unit 501 via the 
library 1201b of the OS 1201. The QAM demodulation unit 501 
demodulates the signal sent from the head end 101 according to the 
tuning information given to the QAM demodulation unit 501, and 

30 passes the resultant signal to the POD 504. 

[0076] Next, the service manager 1204 requests a CA 1205b 
inside the library 1205 to perform descrambling. The CA 1205d 
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provides the POD 504 with information required for descrambling, 
through the library 1201b in the OS 1201. On the basis of such 
provided information, the POD 504 descrambles the signal provided 
by the QAM demodulation unit 501, and passes the result to the TS 
5 decoder 505. 

[0077] Next, the service manager 1204 provides a JMF 1205a 
inside the library 1205 with the identifier of the channel, so as to 
request for the reproduction of the video and audio. 
[0078] First, the JMF 1205a obtains, from a PAT and a PMT, 

10 packet IDs used to specify the video and audio to be reproduced. 
PAT and PMT are tables defined by the MPEG2 standard that show 
the program line-up included in an MPEG2 transport stream. PAT 
and PMT are carried in the payloads in packets included in anMPEG2 
transport stream, together with audio and video. Refer to the 

15 specification for a detailed description of PAT and PMT. Here, only 
an overview of PAT and PMT is given. PAT, which is an abbreviation 
of Program Association Table, is carried in packets with the packet 
ID "0". In order to obtain the PAT, the JMF 1205a indicates, to the 
TS decoder 505, the packet ID "0" and the CPU 514 through the 

20 library 1201b of the OS 1201. Then, the TS decoder 505 performs 
filtering based on the packet ID "0", and passes the resultant to the 
CPU 514. Accordingly, the JMF 1205a can collect the PAT packets. 
FIG. 16 illustrates a table that schematically shows an example of 
the collected PAT information. A column 1601 describes program 

25 numbers. A column 1602 describes packet IDs. The packet IDs 
shown in the column 1602 are used to obtain the PAT. Each of lines 
1611~1613 is a pair of the program number of a channel and a 
packet ID corresponding to it. Here, three channels are defined. 
The line 1611 defines a pair of the program number "101" and the 

30 packet ID "501". Assuming that the channel identifier provided to 
the JMF 1205a is "2", the JMF 1205a refers to the column 1412 in FIG. 
14, so as to obtain the program number"102" corresponding to such 



-27- 



channei identifier, and then refers to the column 1612 in the PAT 
shown in FIG. 16, so as to obtain the packet ID "502" corresponding 
to the program number "102" PMT, which is an abbreviation of 
Program Map Tabie, is carried in packets with the packet IDs 
5 specified in the PAT, In order to obtain the PMT, the JMF 1205a 
indicates, to the TS decoder 505, a packet ID and the CPU 514 
through the library 1201b of the OS 1201. Here, a packet ID to be 
specified is "502". Then, the TS decoder 505 performs filtering 
based on the packet ID "502", and passes the resultant to the CPU 

io 514, Accordingly, the JMF 1205a can collect the PMT packets. FIG. 
17 illustrates a table that schematically shows an example of the 
collected PMT information. A column 1701 describes stream types. 
A column 1702 describes packet IDs. Information specified in the 
respective stream types is carried in the payloads of packets with 

15 the packet IDs specified in the column 1702. A column 1703 
describes additional information. Each of columns 1711^1714 is a 
pair of a packet ID and the type of information being transmitted, 
which is known as an elementary stream. The column 1711, which 
is a pair of the stream type "audio" and the packet ID "5011", 

20 indicates that audio data is stored in the payload of the packet with 
the packet ID "5011". The JMF 1205a obtains, from the PMT, the 
packet IDs of the video and audio to be reproduced. Referring to 
FIG. 17, the JMF 1205a obtains the audio packet ID "5011" from the 
line 1711, and the video packet ID "5012" from the line 1712. 

25 [0079] Then, the JMF 1205a provides the TS decoder 505 with 
pairs of the obtained audio packet ID and the audio decoder 506 as 
an output destination as well as the video packet ID and the video 
decoder 508 as an output destination, via the library 1201b of the 
OS 1201. The TS decoder 505 performs filtering based on such 

30 provided packet IDs and the output destinations. Here, the packet 
with the packet ID "5011" is passed to the audio decoder 506 and 
the packet with the packet ID "5012" is passed to the video decoder 
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508. The audio decoder 506 performs digital-to-anaiog conversion 
on the provided packet, so as to reproduce the audio via the speaker 
507. The video decoder 508 performs digital-to-analog conversion 
on the provided packet, so as to display the video on the display 
5 509. 

[0080] Finally, the service manager 1204 provides the channel 
identifier to an AM 1205b in the library 1205, so as to request for 
data broadcast reproduction. Here, data broadcast reproduction 
means to extract a Java ® program included in the MPEG2 transport 

10 stream and cause the VM 1203 to execute it. As a technique for 
embedding a Java ® program into an MPEG2 transport stream, a 
method known as DSMCC, described in the MPEG specification 
ISO/IEC13818-6, is used. Detailed explanation of DSMCC is 
omitted here. DSMCC specification defines a method of encoding a 

15 file system comprised of directories and files used by a computer, in 
packets within an MPEG2 transport stream. Information about the 
Java ® program to be executed is carried in packets in the MPEG2 
transport stream in the form of AIT. AIT is an abbreviation of 
Application Information Table, and is defined in the OCAP 1.0 

20 specification (formally known as OCAP 1.0 Profile 
OC-SP-OCAP1.0-IF-I09-03U21). 

[0081] First, in order to obtain the AIT, the AM 1205b obtains 

the PAT and PMT as in the case of the JMF 1205a, so as to obtain the 
packet ID of the packet that stores the AIT. Assuming that "2" is 

25 the provided channel identifier and that the PAT shown in FIG. 16 
and the PMT shown in FIG. 17 are being transmitted, the AM 1205b 
obtains the PMT shown in FIG. 17 according to the same procedure 
followed by the JMF 1205a. Subsequently, the AM 1205b extracts, 
from the PMT, the packet ID of the elementary stream whose stream 

30 type is "Data" and which has "AIT" as additional information. As 
shown in FIG. 17, the elementary stream in the line 1713 
corresponds to such elementary stream, and therefore the AM 
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1205b obtains the packet ID "5013" from it. 

[0082] The AM 1205b provides the TS decoder 505 with the 
packet ID of the AIT and the CPU 514 as an output destination, 
through the library 1201b of the OS 1201. Then, the TS decoder 
5 505 performs filtering based on such provided packet ID, and passes 
the resultant to the CPU 514. Accordingly, the AN 1205b can 
collect the packets of AIT. FIG. 18 is a table that schematically 
shows an example of the collected AIT information. A column 1801 
describes identifiers of Java ® programs (noted as a program 

10 identifier in the diagram). A column 1802 describes control 
information for controlling the Java ® programs. The control 
information includes "autostart", "present", and "kill", "autostart" 
means that the terminal apparatus 500 automatically executes the 
program promptly. "present" means that the program is not 

15 executed automatically, "kill" means that the program is to be 
terminated. A column 1803 describes DSMCC identifiers used to 
extract packet IDs that include Java ® programs in the DSMCC 
format. A column 1804 describes program names of the Java ® 
programs. Each of columns 1811 and 1812 is a set of information 

20 regarding a Java ® program. The Java ® program defined in the 
column 1811 is a set of an identifier "301", control information 
"autostart", a DSMCC identifier "1", and a program name "a/TopXIet". 
The Java ® program defined in the column 1812 is a set of an 
identifier "302", control information "present", a DSMCC identifier 

25 "1", and a program name "b/GameXlet". Here, these two Java ® 
programs have the same DSMCC identifier. This indicates that two 
Java ® programs are included in the file system which has been 
encoded according to the same DSMCC method. Here, only four 
items of information are specified for the respective Java ® 

30 programs, but more items of information are specified in actuality. 
Refer to the OCAP 1.0 specification for details. 
[0083] The AM 1205b finds the "autostart" Java ® program 
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from the AIT, and extracts the corresponding DSMCC identifier and 
Java ® program name. Referring to FIG. 18, the AM 1205b extracts 
the Java ® program in the line 1811, and obtains the DSMCC 
identifier "1" and the Java ® program name "a/TopXIet". 
5 [0084] Next, the AM 1205b obtains, from the PMT, the packet 
ID of packets that store Java ® programs in the DSMCC format, 
using the DSMCC identifier obtained from the AIT. More specifically, 
the AM 1205b obtains, from the PMT, the packet ID included in the 
elementary stream whose stream type is "Data" and whose DSMCC 

10 identifier in the additional information matches. 

[0085] Here, assuming that such DSMCC identifier is "1" and 
the PMT is that shown in FIG. 17, the elementary stream in the line 
1714 satisfies the above condition. Therefore, the packet ID 
"5014" is to be extracted. 

15 [0086] The AM 1205b indicates, to the TS decoder 505, the 
packet ID of packets in which data is embedded in the DSMCC format 
as well as the CPU 514 as an output destination through the library 
1201b of the OS 1201. Here, the packet ID "5014" is provided. 
Then, the TS decoder 505 performs filtering based on the provided 

20 packet ID, and passes the resultant to the CPU 514. Accordingly, 
the AM 1205b can collect the required packets. The AM 1205b 
reconstructs the file system from the collected packets according to 
the DSMCC method, and stores the reconstructed file system into 
the primary storage unit 511. The process for extracting data such 

25 as the file system from packets in the MPEG2 transport and storing 
the extracted data into storage units such as the primary storage 
unit 511 is hereinafter referred to as download. 
[0087] FIG. 19 shows an example of the downloaded file 
system. In the diagram, circles represent directories and squares 

30 represent files, where 1901 is a root directory, 1902 is a directory 
"a", 1903 is a directory "b", 1904 is a file "TopXIet. class", and 1905 
is a file "GameXlet. class". 
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[0088] Subsequently, the AM 1205b passes, to the VM 1203, a 
Java ® program to be executed out of the file system downloaded 
into the primary storage unit 511. Here, assuming that the Java ® 
program name to be executed is "a/TopXlet", a file tt a/TopXlet. class", 
5 resulting from the appendage of ".class" to the above Java ® 
program name, is a file to be executed. V" is a delimiter between 
a directory and a file name, and as shown in FIG. 19, the file 1904 is 
a Java ® program to be executed. Next, the AM 1205b passes the 
file 1904 to the VM 1203. 

10 [0089] The VM 1203 executes such received Java ® program. 

Upon receiving the identifier of another channel, the service 
manager 1204 stops the reproduction of the video and audio as well 
as the execution of the Java ® program which are being carried out 
through each library included in the library 1205, likewise through 

15 each library included in the same library 1205, and then performs 
the reproduction of the video and audio as well as the execution of 
a Java ® program in accordance with the newly received channel 
identifier. 

[0090] The library 1205 is a collection of plural Java ® libraries 
20 stored in the ROM 512. In the present embodiment, the library 
1205 includes the JMF 1205a, the AM 1205b, the Tuner 1205c, the 
CA 1205d, a POD Lib I205e, MA management unit 1205f, and the 
like. 

[0091] It is mentioned that the initialization subprogram 802 

25 performs the activation of a privileged program based on special 
program information transmitted by the head end 101. Details of 
this shall be described. 

[0092] The OCAP 1.0 specification stipulates a procedure in 
which a privileged program (hereinafter referred to as a monitor 
30 application) is downloaded from a source outside the terminal 
apparatus and executed in place of a program provided beforehand 
in the terminal such as the EPG 1202. As a function of the monitor 
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application, for example, there is the displaying of an electronic 
program guide. In addition, it is stipulated that, in the case where 
it is specified that a monitor application exists and that it should 
automatically activate, the monitor application must be executed. 
5 Here, details are omitted, and only the areas relevant to the present 
invention shall be discussed. 

[0093] FIG. 20 is a table that schematically represents an 
example of special program information (hereinafter referred to as 
XAIT) to be transmitted from the head end 101. As the XAIT adopts 

10 a structure similar to that of the AIT shown in FIG. 18, the same 
constituent elements are assigned the same reference numbers, and 
their description shall be omitted. A column 2005 describes a 
monitor application identifier. Unlike the processing of the AIT in 
the AM 1205b, only programs having a monitor application identifier 

is of 1 or higher, for example, are treated as a monitor application. In 
the case where there are plural programs having a monitor 
application identifier of 1 or higher in the XAIT, all such programs 
are treated as monitor applications. Details shall be discussed 
later. 

20 [0094] Note that although it is mentioned that only those 
having a monitor application identifier of 1 or higher are treated as 
monitor applications, it is also possible to determine whether or not 
a program shall be handled as a monitor application, according to a 
different condition. 

25 [0095] The initialization subprogram 802 performs the 
activation of a special program based on special program 
information transmitted from the head end 101, by instructing the 
activation of the monitor application to the MA management unit 
1205f. 

30 [0096] FIG. 21 is a block diagram showing an example of the 
structure of the MA management unit 1205f. 

The MA management unit 1205f includes an MA management 
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unit main 2101, an XAIT obtainment analysis unit 2102, an MA 
selection unit A 2103, an MA activation unit 2104, an MA monitoring 
unit 2105, and an MA selection unit B 2106. 

[0097] The MA management main 2101 plays the central role 
5 in the MA management unit 1205f and implements the functions of 
the MA management unit 1205f by receiving an instruction from the 
initiaiization subprogram 802 and using the other constituent 
elements within the MA management unit 1205f. 
[0098] The XAIT obtainment analysis unit 2102 analyzes, 

10 according to an instruction from the MA management unit main 
2101, an XAIT sent from the head end 101 and returns the analysis, 
result to the MA management unit main 2101. For example, the 
details shown in FIG. 20 are returned as the analysis result. 
[0099] The MA selection unit A 2103 selects the monitor 

15 application to be activated based on the XAIT analysis result passed 
on from the MA management unit main 2101, and returns the result 
to the MA management unit main 2101. For example, in the case 
where the details in FIG. 20 are given as the XAIT analysis result, 
the MA selection unit A 2103 may select the program indicated in 

20 row 1811, as the monitor application to be activated. 

[0100] The MA activation unit 2104 performs the activation of 
the monitor application specified by the MA management unit main 
2101. For example, in the case where the program shown in row 
1811 in FIG. 20 is specified, it activates "/a/MAl" as the monitor 

25 application. Description of the activation method shall be omitted 
as it is the same as in the operation of the AM 1205b. 
[0101] The MA monitoring unit 2105 monitors the operational 
state of the monitor application specified by the MA management 
unit main 2101 and, in the case where abnormal termination occurs, 

30 notifies such fact to the MA management unit main 2101. As a 
technique for recognizing the occurrence of an abnormal 
termination, the judgment for such can be made, for example, by 
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receiving exceptions sent out by the monitor application. Since 
exceptions are defined in the Java ® language specification, 
description shall be omitted. Furthermore, it is aiso possible to 
have the MA monitoring unit 2105 monitor plural monitor 
5 applications at the same time. 

[0102] The MA selection unit B 2106 selects an alternative 
application according to an instruction from the MA management 
unit main 2101, and returns the selection result to the MA 
management unit main 2101. 
10 [0103] FIG. 22 is a flowchart showing the procedure for the 
monitor application activation performed by the MA management 
unit 1205f 

[0104] When the MA management unit main 2101 receives the 
instruction from the initialization subprogram 802, first, the MA 

15 management unit main 2101 outputs an XAIT analysis instruction to 
the XAIT obtainment analysis unit 2102, and the XAIT obtainment 
analysis unit 2102 attempts to obtain the XAIT being sent from the 
head end 101 (S2201). In addition, the XAIT obtainment analysis 
unit 2102 analyzes the XAIT (S2203), and returns the analysis result 

20 to the MA management unit main 2101. When, based on the 
analysis result, the MA management unit main 2101 requests the MA 
selection unit A 2103 to select a monitor application, the MA 
selection unit A 2103 selects the monitor application to be activated, 
based on the information forwarded by the MA management unit 

25 main 2101, and returns the selection result to the MA management 
unit main 2101 (S2204). Note that in the case where the XAIT 
obtainment or analysis fails in S2201 or in S2203, the MA selection 
unit A 2103 returns an alternative program (for example, the EPG 
1202) to the MA management unit main 2101, as the selection result. 

30 When, based on the result returned by the MA selection unit A 2103, 
the MA management unit main 2101 instructs the MA activation unit 
2104 to activate the monitor application, the MA activation unit 
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2104 activates the monitor application instructed by the MA 
management unit main 2101 (S2205). When, in addition, the MA 
management unit main 2101 instructs the MA monitoring unit 2105 
to monitor the operational state of the monitor application activated 
5 by the MA activation unit 2104, the MA monitoring unit 2105 starts 
the monitoring of the operational state of the instructed monitor 
application (S2206). In addition, in the case where plural monitor 
applications are selected in S2204, the MA management unit main 
2101 selects, from among such monitor applications, a monitor 

10 application whose activation has not yet been instructed to the MA 
activation unit 2104, and likewise attempts the activation and 
monitoring of the monitor application (S2207). When the MA 
management unit main 2101 completes the giving of activation and 
monitoring instructions for all monitor applications selected in 

15 S2204, the process with regard to monitor application activation is 
completed. Furthermore, in the case where a monitor application 
to be activated is not selected in S2204, the MA management unit 
main 2101 may perform the processes from S2205 onward, with an 
alternative program (for example, the EPG 1202) being selected. 

20 [0105] Here, the process in the case where the activated 
monitor application abnormally terminates at an unforeseen timing 
shall be described. 

[0106] The OCAP 1.0 specification stipulates that, in the case 
where the monitor application abnormally terminates, the 
25 re-activation of such monitor application shall be attempted. 
However, based on the actual experience of abnormal termination, 
the re-occurrence of abnormal termination after the re-activation 
can be fairly expected. 

[0107] In light of this, the present invention describes a 
30 method in which an alternative program is executed in place of the 
monitor application that is expected to abnormally terminate. Note 
that although it is preferable that the normal operation of the 
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alternative program is guaranteed (in other words, abnormal 
termination does not occur), implementation is possible even when 
such is not guaranteed. 

[0108] FIG. 23 is a flowchart showing the process in the case 
5 where the activated monitor application abnormally terminates at 
an unforeseen timing. 

[0109] When the MA monitoring unit 2105 detects the 

abnormal termination of the currently monitored monitor 
application (S2301), the MA monitoring unit 2105 ends the 

io monitoring of the abnormally terminated monitor application 
(S2302), and notifies the occurrence of the abnormal termination to 
the MA management unit main 2101 (S2303). 
[0110] Upon receiving the notification regarding the abnormal 
termination from the MA monitoring unit 2105, the MA management 

15 unit main 2101 requests the selection of an alternative program to 
the MA selection unit B 2106. In accordance with the request from 
the MA management unit main 2101, the MA selection unit B 2106 
selects an alternative program and returns, to the MA management 
unit main 2101, information necessary for the activation of the 

20 alternative program (S2304). The information necessary for the 
activation of the alternative program are, for example, the name of 
the program, the location at which the program is stored, and the 
like. 

[0111] Based on the information returned by the MA selection 
25 unit B 2106, the MA management unit main 2101 instructs the 
activation of the alternative program to the MA activation unit 2104 
(S2305). 

[0112] The MA management unit main 2101 requests the MA 
monitoring unit 2105 to monitor the operational state of the 
30 alternative program (S2306). 

[0113] In addition, in the case where the alternative program 
abnormally terminates, the next alternative program is selected and 
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activated in the same procedure (S2301 to S2306) as in the case 
where the previously mentioned monitor application abnormally 
terminated. 

[0114] Furthermore, in the result in S2303, the MA 
5 management unit main 2101 need not necessarily perform the 
alternative program activation process (in other words, S2304 
onward). For example, in the case where plural monitor 
applications are selected in S2204 in FIG. 22 and as a result plural 
monitor applications are activated, it is possible to have the MA 

10 management unit main 2101 perform the alternative program 
activation process (in other words S2304 onward) only in the case 
where all of such monitor appiications abnormally terminate. 
[0115] In addition, it is also possible to have the alternative 
program activation process take place only in the case where a 

15 specific monitor application abnormally terminates. The specific 
monitor application is, for example, the monitor application in 
column 2005 in FIG. 20, specified by the monitor application 
identifier 1. In this case, even when the monitor application 
specified by the monitor application identifier 2 abnormally 

20 terminates, the alternative program activation process does not 
have to be carried out. Furthermore, in this case, implementation 
is also possible even when the process in S2206 (in other words, the 
operational state monitoring) in FIG. 22 is not carried out for the 
monitor application which does not have a monitor application 

25 identifier of 1. 

[0116] Note that, although the EPG 1202 was mentioned as an 
example of the alternative program, another program can also be 
used as the alternative program, for as long as activation is possible. 
For example, implementation is still possible even with a program 

30 which re-starts the terminal apparatus or a program which only 
performs simple switching of channels, as an alternative program. 
Furthermore, the alternative program may specify the information 
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of a program to the MA management unit main 2101 so that 
requesting the activation of another aiternative program is made 
possible. For example, it is possible for the alternative program to 
instruct the re-activation of the monitor application which 
5 abnormally terminated earlier, and subsequently, the monitor 
application is activated. 

[0117] Moreover, although the EPG 1202, which is the example 
of the alternative program, is described as being previously 
provided in the terminal apparatus, the present invention can also 

10 be implemented even without such previous preparation. For 
example, in the alternative program activation stage, it is also 
possible to download from an external source and activate the 
downloaded program. For example, the alternative program may 
be downloaded via a network, or downloaded from within an MPEG 

15 stream received by the terminal apparatus. With this, a program 
which is not previously provided can be activated as the alternative 
program. 

[0118] Note that, although it is mentioned that the monitor 

application is downloaded and executed, the present invention may 
20 also be implemented even in the case where the monitor application 
is stored in the secondary storage unit 705 during the first 
downloading and, from the second time onward, the monitor 
application stored in the secondary storage unit 705 is used in place 
of downloading. 

25 [0119] Note that, although description is carried out for the 
case where the MA selection unit B 2106 selects the EPG 1202 as the 
aiternative program, implementation is possible as long as long as it 
is possible to select, using an arbitrary selection method, an 
arbitrary program that is capable of being activated. 

30 [0120] In addition, it is possible, in the case where the monitor 
application abnormally terminates, to have the MA management unit 
1205f store the details of the abnormal termination in the primary 
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storage unit 511 or the secondary storage unit 510. In addition, 
the stored details may also be transmitted to a destination outside 
of the terminal apparatus. Although the details to be stored are, 
for example, the time at which the abnormal termination occurred, 
5 the Java ® program identifier, the program name, the type of the 
abnormal termination (for example, insufficient memory), and so on, 
implementation is possible as long as it is information which at least 
allows the distinguishing of the occurrence of the abnormal 
termination. Furthermore, examples of the destination outside of 

10 an information terminal are the terminal apparatus manufacturer 
and the broadcast operator. As suhc, by transmitting to the 
terminal apparatus manufacturer in the case where abnormal 
termination occurs due to a malfunction in the terminal apparatus, 
the terminal apparatus manufacturer can immediately implement a 

15 countermeasure. Also, by transmitting to the broadcast operator in 
the case where the occurrence is caused by a malfunction in the 
monitor application, it becomes possible to immediately correct the 
malfunction in the monitor application. The process in this case is 
shown in FIG. 24. Moreover, in FIG. 24, parts having processes 

20 which are the same as in FIG. 23 are assigned the same reference 
numbers, and their description shall be omitted. 
[0121] When the MA management unit main 2101 detects an 
abnormal termination of the monitor application according to S2303 
in FIG. 24, the MA management unit main 2101 stores the details of 

25 the abnormal termination into the primary storage unit 511 or the 
secondary storage unit 510 (S2410). In addition, MA management 
unit main 2101 transmits the stored details to a destination outside 
the terminal apparatus. Subsequently, the MA management unit 
main 2101 continues with the processes from S2304 onward. 

30 [0122] Moreover, with regard to the transmission means, any 
implementation is possible as long as it allows the communication of 
information to the outside of the terminal apparatus. For example, 
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it is possible to transmit the stored details using FTP and E-maii 
which are commoniy known technology. 

[0123] Moreover, implementation is also possible using a 
removable storage device as the secondary storage apparatus. In 
5 this case, it is also possible to have an implementation in which 
transmission to the outside is not performed, and the removable 
storage device is transported using some means of transportation. 
[0124] Moreover, in the present embodiment, it is also 
becomes possible to eliminate the ROM 512 by storing the details 

io stored by the ROM 512 in the secondary storage unit 510. 
Furthermore, it is also possible to have the secondary storage unit 
510 as being made up of plural sub-secondary storage units, with 
each of the sub-secondary storage units storing different 
information. For example, it is possible to have a detailed division 

15 in which, for example, one of the sub-secondary storage unit stores 
only tuning information, another sub-secondary storage unit stores 
the library 1201b of the OS 1201, and yet another sub-secondary 
storage unit stores a downloaded Java ® program, and so on. 
[0125] Furthermore, although in the present embodiment, the 

20 registered Java ® program is stored in the secondary storage unit 
510, it may also be stored in the primary storage unit 511. In the 
case of storing in the primary storage unit 511, all stored 
information is lost when the power is turned OFF. 
[0126] (Second Embodiment) 

25 The first embodiment describes the case where the MA 

selection unit B 2106 selects the EPG 1202 as the alternative 
program. The present embodiment describes the case where, as a 
different selection method, the MA selection unit B 2106 once again 
selects the same program as that in the selection result from the MA 

30 selection unit A 2103 (in other words the program that has 
abnormally terminated). 

[0127] This is the case where, even when a monitor 
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application abnormally terminates, the same monitor application is 
re-activated by the MA management unit 1205f according to some 
basis for judgment. Such basis for judgment, for example, is when 
a countermeasure for the cause of the abnormal termination is 
5 known in advance and, by implementing the countermeasure after 
the abnormal termination, norma! operation can be expected after 
re-activation. The countermeasure, for example, in the case where 
the monitor application abnormally terminates due to insufficient 
memory, is the securing of memory capacity that can be used by the 

10 monitor application, by the termination of other programs. 

[0128] In the present embodiment, during the occurrence of 
the abnormal termination of the memory application, the MA 
monitoring unit 2105 notifies the MA management unit main 2101 of 
the occurrence of the abnormal termination, as well as, for example, 

15 a code indicating the cause of the abnormal termination of the 
monitor application. The MA management unit main 2101 
previously holds, in a table or the like, countermeasures 
corresponding to codes (cause of the abnormal termination), and 
determines the countermeasure corresponding to the notified code 

20 and implements the determined countermeasure. 

[0129] FIG. 25 shows the operational procedure in the present 
embodiment. 

In FIG. 25, the parts that are the same as in FIG. 23 are 
assigned the same reference numbers, and their description is 
25 omitted. 

[0130] In S2303, the MA monitoring unit 2105 notifies the 
occurrence of the abnormal termination of the monitor application, 
as well as the code indicating the cause of the abnormal termination 
of the monitor application, to the MA management unit main 2101. 
30 Then, when the MA management unit main 2101 requests the MA 
selection unit B 2106 to select an alternative program, the MA 
selection unit B 2106 selects, as the alternative program, the 
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monitor application which abnormally terminated, and returns 
information necessary for the activation of the monitor application 
to the MA management unit main 2101 (S2510). The information 
necessary for the activation of the monitor application is the 
5 information returned in S2204 in FIG. 22, or a part thereof, and 
additional information. Additional information is, for example, the 
number of times the selected monitor application has abnormally 
terminated, and the number of times the monitor application has 
been selected as an alternative program. In this case, in order to 

10 store the number of times the monitor application has abnormally 
terminated, the MA selection unit B 2106 stores such information in 
the primary storage unit 511 for example, FIG. 26(a), (b) and (c) 
are tables schematically representing the data stored in the primary 
storage unit 511. A column 2601 is a Java ® program identifier, a 

15 column 2602 is the number of times the program indicated by the 
Java ® program identifier has abnormally terminated. A row 2611 
and a row 2612 are the set of Java ® program information. For 
example, referring to FIG. 26(a), the Java ® program in row 2611 is 
defined by the set of the identifier "301" and the number of program 

20 abnormal terminations "0". The Java ® program in row 2612 is 
defined by the set of the identifier "302" and the number of program 
abnormal terminations "0". 

[0131] FIG. 26(a) shows the details held prior to the process in 
S2302 in FIG. 23. In S2303 in FIG. 25, in the case where it is 

25 notified that the monitor application having the Java ® identifier 
301 has abnormally terminated, the data held in the primary storage 
unit 511 changes to that shown in FIG. 26(b). Note that 
implementation is also possible even without additional information. 
[0132] The MA management unit main 2101 determines the 

30 countermeasure corresponding to the notified code, and implements 
the determined countermeasure for the cause of the abnormal 
termination (S2511). Subsequently, the processes from S2305 
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onward are carried out. 

[0133] With this procedure, after the abnormal termination of 
the monitor application, it is possible to once again activate the 
same monitor application. 
5 [0134] (Third Embodiment) 

The second embodiment describes the case where, as an 
example, the MA selection unit B 2106 once again selects the same 
program as that in the selection result from the MA selection unit A 
2103 (in other words the program that has abnormally terminated). 

10 In the present embodiment, as a different selection method, it is 
possible to have the MA selection unit B 2106 once again select the 
same program as that in the selection result from the MA selection 
unit A 2103 (in other words, the program that abnormally 
terminated) up to the Nth abnormal termination, and select another 

15 program (for example the EPG 1202) from the N + lth time onward. 
[0135] Here, description shall be carried out for the case 
where N = 2 times, and an alternative program is selected when the 
monitor application having the Java ® program identifier 301 
abnormally terminates. 

20 [0136] FIG. 27 is a flowchart showing the operational 
procedure in the present embodiment. 

In FIG. 27, parts which are the same as the processes in FIG. 
23 are assigned the same reference numbers, and their description 
shall be omitted. 

25 [0137] In the case where the monitor application having the 
Java ® program identifier 301 abnormally terminates for the first 
time, the MA management unit main 2101 requests, as a result of 
S2303, the MA selection unit B 2106 to select an alternative program, 
and the MA selection unit B 2106 first counts the number of 

30 abnormal terminations (step S2701). More specifically, the details 
stored in the primary storage unit 511 are changed from that in FIG. 
26(a) to that in FIG. 26(b). Next, referring to the number of times 
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the program has abnormally terminated shown in FIG. 26, it is 
judged whether or not the number of abnormal terminations is equal 
to or greater than a predetermined number of times (N times) (step 
S2702). Here, in the case where the number of abnormal 
5 terminations is not equal to or greater than the predetermined 
number of times (N times) (No in step S2702), the MA selection unit 
B 2106 selects the monitor application having the Java ® program 
identifier 301 (step S2704), and the processes from S2305 onward 
are subsequently carried out. On the other hand, in the case where 

10 the number of abnormal terminations is equal to or greater than the 
predetermined number of times (N times) (Yes in step S2702), the 
MA selection unit B 2106 selects a program other than the monitor 
application having the Java ® program identifier 301 (for example, 
the EPG 1202) (step S2703), and the processes from S2305 onward 

15 are subsequently carried out. 

[0138] In this example, the column 2602 in FIG. 26(b) is 
referred to, and it is found out that the number of abnormal 
terminations up to this point is 1. Therefore, the MA selection unit 
B 2106 selects the monitor application having the Java ® program 

20 identifier 301. From there, the processes from S2305 onward are 
carried out. 

[0139] Next, in the case where the monitor application having 
the Java ® program identifier 301 abnormally terminates for the 
second time, the MA management unit main 2101 requests, as a 

25 result of S2303, the MA selection unit B 2106 to select an alternative 
program, and the MA selection unit B 2106 first changes the details 
stored in the primary storage unit 511, from that in FIG. 26(b) to 
that in FIG. 26(c). Next, it refers to the number of times the 
program has abnormally terminated shown in FIG. 26. At this time, 

so the column 2602 in FIG. 26(c) is referred to, and it is found out that 
the number of abnormal terminations up to this point is 2. Here, 
since the predetermined number of times (in this case, 2 times) has 
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already been reached, the MA selection unit B 2106 selects a 
program other than the monitor application having the Java ® 
program identifier 301. From there, the processes from S2305 
onward are carried out. 
5 [0140] As such, with respect to the abnormal termination for 
the monitor application having the Java ® program identifier 301, it 
is possible to activate, once again, the monitor application having 
the Java ® program identifier 301 up to the first time, and activate 
a program other than the monitor application having the Java ® 

10 program identifier 301 for the second time onward. 

[0141] Note that although description is carried out for the 

case where N = 2, N may be any integer equal to or greater than 1. 
[0142] (Fourth Embodiment) 

The first to third embodiments describe cases where the 

15 program to be selected is determined in advance, as the alternative 
program selection method used by the MA selection unit B 2106. 
However, as another selection method, it is also possible to have a 
method in which a list of programs serving as selection candidates is 
presented to the viewer, and the viewer is made to do the selection. 

20 [0143] FIG. 28 is a flowchart showing the operational 

procedure in the present embodiment. Moreover, parts which are 
the same as the processes in FIG. 23 are assigned the same 
reference numbers, and their description shall be omitted. 
[0144] When, as a result of S2303, the MA management unit 

25 main 2101 requests the MA selection unit B 2106 to select an 
alternative program, the MA selection unit B 2106 first creates a list 
of programs which can be selected as the alternative program 
(52810). Next, the MA selection unit B 2106 presents the created 
list of programs to the viewer, and prompts the selection (S2811). 

30 The MA selection unit B 2106 determines the alternative program, 
based on the selection of the viewer (S2812). From there, the 
processes from S2305 onward are carried out. 
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[0145] Here, FIG. 29 is a table schematicaliy representing the 
list of programs which can be selected as the alternative program, 
created by the MA selection unit B 2106 in S2810. A column 2901 
is a Java ® program identifier. A column 2902 is a program name. 
5 Row 2911 and row 2912 are the set of information of the Java ® 
program. The Java ® program in row 2911 is defined by the set of 
the identifier "301" and the program name "MAI". The Java ® 
program in row 2912 is defined by the set of the identifier "701" and 
the program name "EPG". 

10 [0146] Note that it is possible to use details other than those 
shown in FIG. 29, as long as they include information which allows 
the MA selection unit 8 2106 to distinguish the programs. 
[0147] Furthermore, for as long as activation is possible, the 
programs included in the list may be located anywhere. 

is [0148] FIG. 30 is a diagram showing an example of the display 
presented to the viewer in S2810. Here, a dialogue 3001 is 
displayed on the display 509. The viewer selects a program from 
the displayed programs. For example, "MAI" is selected by 
pressing the button "1" on the remote control. In this case, since 

20 the MA selection unit B 2106 is made aware that the viewer has 
selected the identifier "301", the MA selection unit B 2106 
determines the program having the identifier "301" as the 
alternative program. Furthermore, in the case where the viewer 
selects "EPG" by pressing button "2" on the remote control, since 

25 the MA selection unit B 2106 is made aware that the viewer has 
selected the identifier "701", the MA selection unit B 2106 
determines the EPG 1202, which is the program having the identifier 
"701", as the alternative program. 

[0149] Note that it possible to user other details as long as 
30 they at least include information that allows the viewer to 
distinguish the programs. 

[0150] Furthermore, any display format and selection method 
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may be used as long as, at least, the program selected by the viewer 
is communicated to the MA selection unit B 2106. 
[0151] Furthermore, it is also possible to have, through the 
satisfaction of a certain condition, the MA selection unit B 2106 
5 select the alternative program without waiting for the selection by 
the viewer. For example, it is possible that, in the case where after 
presenting to the viewer, the viewer does not make a selection even 
when 30 seconds have elapsed, the MA selection unit B 2106 selects, 
as the alternative program, the EPG 1202 which is the program 

10 having the identifier "701". 

[0152] (Fifth Embodiment) 

It is possible that, upon receiving the abnormal termination 
notification from the MA monitoring unit 2105 in the first to third 
embodiments, the MA selection unit B 2106 may notify the viewer of 

15 the occurrence of the abnormal termination. 

[0153] FIG. 31 is a diagram showing an example of a method 
for notifying the viewer. For example, notification is possible by 
displaying on a seven segment LED 3102 in the main body of the 
terminal apparatus, or by lighting a lamp 3101 in the main body of 

20 the terminal apparatus. 

[0154] FIG, 32 shows an example of the display made in the 
case where the abnormal termination of the monitor application is 
notified by displaying on the display 509. The message to the 
viewer is stated inside a dialogue 3201 and, by displaying the 

25 dialogue 3201 on the display 509, the viewer can be notified of the 
occurrence of the abnormal termination. 

[0155] Note that aside from the methods shown as examples 
in FIG. 31 and 32, implementation is possible as long as the 
presentation is made using a method which allows recognition by 
30 the viewer. 

[0155] (Sixth Embodiment) 

The present embodiment describes the case where the Java ® 
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program activated based on the information in the XAIT obtained 
from the head end 101 is a special monitor application which is 
registered, in place of a program within the library 1202b of the OS 
1201, as the Java ® program that can be referred to by the POD 504, 
5 and which can transmit and receive messages to and from a 
subprogram in the POD 504. 

[0157] For example, by switching the Java ® program in place 
of a dialogue display program which is a program within the library 
1202b of the OS 1201, it becomes possible for the Java ® program 

io to carry out the transmission and reception of messages to and from 
the PPV subprogram 805 which is a subprogram within the POD 504. 
[0158] Unlike in the other embodiments, in the case of the 
present embodiment, the program within the library 1202b of the OS 
1201 always operates continuously and, even in the case where the 

15 Java ® program is registered, the program within the library 1202b 
of the OS 1201 need not be terminated. However, even in this case, 
when the registered Java ® program abnormally terminates and the 
same Java ® program is activated once again, the re-occurrence of 
abnormal termination can be fairly expected, and thus, hindering 

20 the request (for example, PPV viewing) made by the user. The 
present embodiment describes the application of the present 
invention for such problem. 

[0159] The present embodiment first describes the 
registration process and the registration-cancellation process for 

25 the Java ® program that can be referred to by the POD 504 in place 
of the program within the library 1202b of the OS 1201, and then, 
the main topic which is the process in the case where the Java ® 
program abnormally terminates shall be discussed. 
[0160] FIG. 33 shows an example of information in the XAIT, 

30 regarding the Java ® programs, in the present embodiment. In FIG. 
33, elements which are the same as in FIG. 20 are assigned the 
same reference numbers, and their description shall be omitted. 
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Column 3311 and column 3312 are the set of information for a Java 
® program. The Java ® program in column 3311 is defined by the 
set of a Java ® program identifier "701", control information 
"autostart", a DSMCC identifier "1", a program name Va/PPVlXlet", 
5 and a monitor application identifier "1". The Java ® program in 
column 3312 is defined by the set of a Java ® program identifier 
"702", control information "present", a DSMCC identifier "1", a 
program name 1 7b/PPV2Xlet", and a monitor application identifier 
"2". Here, although only five items of information are stipulated, 
10 the present invention can be implemented even when more 
information is defined. 

[0161] Here, it is assumed that the Java ® program 
"PPVlXlet" is a program for displaying program information serving 
as the subject of PPV, in cooperation with the PPV subprogram 805 

15 held within the POD 504. When the PPV subprogram 805 sends the 
information to be displayed on the screen to the CPU 514 of the 
terminal apparatus 500 in the case where the Java ® program 
"PPVlXlet" is not present in the terminal apparatus 500, the 
dialogue display program included in the library 1202b of the OS 

20 1201 displays, on the display 509, the message for prompting 
program purchasing shown in FIG. 34. 3401 is a dialogue box 
which holds display elements such as: a message 3402; a personal 
identification number box 3403 for inputting a 4 digit personal 
identification number; an OK button 3403; and a cancel button 3405. 

25 However, since program details are unknown in this display, the user 
needs to check the program details by referring to books and the like, 
such as a program guide, thereby proving inconvenient. 
[0162] In the terminal apparatus 500, when the Java ® 
program "PPVlXlet" is activated, the Java ® program "PPVlXlet" 

30 registers itself in the POD Lib 1205e of the Java ® library 1205, as 
the Java ® program that can be referred to by the POD 504. During 
registration, it also simultaneously registers "PPV" as its own Java ® 
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program module identifier. The POD Lib 1205e stores the 
registered details in the secondary storage unit 510. FIG. 35 shows 
an example of the appearance of the secondary storage unit 510 
storing the information of the registered Java ® program that can be 
5 referred to by the POD 504. In this example, storage is done in a 
table format, and a column 3501 stores a Java ® program module 
identifier, and a column 3504 stores the name of the Java ® program. 
A row 3511 and a row 3512 indicate the registered Java ® programs. 
Row 3511 is the set of the module identifier U PPV", and the Java ® 

10 program name "PPVlXlet". Row 2312 is the set of the module 
identifier u VOD", and the Java ® program name "VODXIet". Note 
that although the Java ® program module identifier 3501 and the 
Java ® program name 3504 are stored here, implementation is 
possible as Song as at least the Java ® program module identifier 

15 and information allowing the unique identification of the registered 
Java ® program are stored. 

[0163] Through the notification of the information of the 
registered Java ® program to the POD 504 by the POD Lib 1205e, 
the transmission and reception of messages between a subprogram 

20 within the POD 504 and the registered Java ® program becomes 
possible. For example, it is possible for the PPV subprogram 805 
within the POD 504 to send details of a program which is subject to 
PPV purchasing, to the registered Java ® program indicated in row 
3511 in FIG. 35 and, in place of the dialogue display program, such 

25 Java ® program can carry out the display of the program details on 
the display 509 as in FIG. 36. Here, 3601 shows the display of 
program information, and the same display as that of the dialogue 
display program, carried out by the registered Java ® program. 
[0164] However, although the dialogue display program of the 

30 library 1202b of the OS 1201 does not display anything here, in 
actuality, it may also be executed together with the registered Java 
® program. Here, the POD 504 refers to the type of the registered 
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Java ® program and identifies the Java ® program which is the 
message sending partner. Specifically, the dialogue display 
program of the library 1202b of the OS 1201 holds a module 
identifier "PPV" and the Java ® program to be registered is made to 
5 hold the same module identifier "ppv" as the dialogue display 
program of the library 1202b of the OS 1201, and the POD 504 refers 
to this module identifier and identifies the Java ® program which is 
the message transmission and reception partner. 
[0165] In the present embodiment, it is assumed that the 

io respective subprograms of the POD 504 cannot transmit and receive 
messages simultaneously between plural programs having the same 
module identifier (in other words, with respect to a particular 
module identifier, the respective subprograms of the POD 504 are 
allowed transmission and reception with a maximum of only 1 

15 program). 

[0166] FIG. 37 is a flowchart summarizing the operation of the 
POD Lib 1205e in the case where a Java ® program is registered in 
the POD Lib 1205e. 

[0167] Upon accepting a registration for message delivery 
20 (includes at least one of transmission and reception, or both) with 
the Java ® program, the POD Lib 1205e stores necessary 
information (for example, information such as that shown in FIG. 
35) in the secondary storage unit 510 (step S3701), and judges 
whether or not there exists a program having the same module 
25 identifier as the Java ® program whose registration was accepted, 
by comparing the module identifier of the Java ® program whose 
registration was accepted in step S3701 with the module identifiers 
of programs already stored in the secondary storage unit 510 and 
programs within the library 1201b (step S3702). 
30 [0168] As a result, in the case where a program having the 
same module identifier exists (Yes in step S3702), the POD Lib 
1205e gives advanced notification of the stoppage of message 
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delivery to the subject of the message delivery up to that point, 
specifically, another Java ® program registered in the secondary 
storage unit 510 or a program within the library 1201b of the OS 
1201 (step S3703). 
5 [0169] After ending necessary processes (internal processes 
needed for the stoppage of message delivery with the POD 504 (in 
other words, de-registration of the message delivery registration)), 
the Java ® program and the library 1201b of the OS 1201 receiving 
the stoppage notice subsequently notify the acknowledgment of the 

io message transmission stoppage to the POD Lib 1205e (step S3704). 
[0170] Upon receiving the acknowledgment notice, the POD 
Lib 1205e cancels (in other words, de-registers) the message 
delivery registration with the Java ® program which already exists 
(in other words, registered in the secondary storage unit 510, and 

15 the subject of the stoppage of message delivery between the POD 
504) or the program within the library 1201b of the OS 1201, and 
stops the message delivery with such program (step S3705). Then, 
the start of message delivery is notified to the Java ® program 
whose registration was accepted in step S3701 (step S3706). 

20 Subsequently, by carrying out the registration accepting the 
message delivery with the POD 504, to the Java ® program whose 
registration was received in step S3701, the message delivery is 
made valid (step S3707). 

[0171] On the other hand, in the case where a program having 
25 the same module identifier does not exist (No in step 3702), the POD 
Lib 1205e notifies the start of message delivery to the Java ® 
program whose registration was accepted in step S3701 (step 
S3706). Then, by carrying out the registration accepting the 
message delivery with the POD 504, to the Java ® program whose 
30 registration was received in step S3701, the message delivery is 
made valid (step S3707). 

[0172] FIG. 38 and FIG. 39 are schematic diagrams, based on 
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the present operational flowchart (FIG. 37), showing the change of 
destinations in the message delivery with the POD 504. FIG. 38(a) 
represents the state in which the Java ® program is not registered, 
and message delivery with the POD 504 is carried out with the 
5 library 1201b of the OS 1201 (more specifically, for example, the 
dialogue display program of the library 1201b). An arrow 3801 
represents the message delivery. In the state in FIG. 38(a), when 
a Java ® program 3811 having the same module identifier as the 
program within the library 1201b of the OS 1201 is registered, the 
10 message delivery between the POD 504 and the library 1201b 
indicated by the arrow 3801 is stopped and message delivery 
between the POD 504 and the Java ® program 3811 is set, in 
accordance with the flowchart in FIG. 37, and the state shown in FIG. 
38(b) is assumed. 

15 [0173] FIG. 39(a) represents the state in which a Java ® 
program 3911 is registered, and message delivery with the POD 504 
is carried out with the registered Java ® program 3911. An arrow 
3901 represents the message delivery. In the state in FIG. 39(a), 
when a Java ® program 3912 having the same module identifier as 

20 the Java ® program 3911 is registered, the message delivery 
between the POD 504 and the Java ® program 3911 indicated by the 
arrow 3901 is stopped and message delivery between the POD 504 
and the Java ® program 3912 is set (arrow 3902), in accordance 
with the flowchart in FIG. 37, and the state shown in FIG. 39(b) is 

25 assumed. 

[0174] Furthermore, together with accepting the registration 
of a Java ® program, the POD Lib 1205e also accepts registration 
cancellation (in other words, requests for de-registration). 
[0175] FIG. 40 is a flowchart summarizing the operation of the 
30 POD Lib 1205e in the case where the POD Lib 1205e cancels the 
registration of a Java ® program (in other words, de-registering the 
registration for message delivery with the Java ® program 



-54- 



registered in the secondary storage unit 510). 
[0176] Upon accepting the cancellation of the Java ® program 
(step S4001), the POD Lib 1205e gives an advanced notification, to 
the Java ® program which is the subject of the cancellation, that 
5 message delivery will be stopped (step S4002). After ending 
necessary processes (necessary internal processes that need to be 
done before the stoppage of message delivery with the POD 504 (in 
other words, de-registration of the message delivery registration)), 
the Java ® program receiving the notice subsequently notifies the 

10 acknowledgment of the message transmission stoppage to the POD 
Lib 1205e (step S4003). Upon receiving the acknowledgment 
notice, the POD Lib 1205e stops the message delivery between the 
POD 504 and the subject Java ® program (step S4004) by cancelling 
(in other words de-registering) the registration for message delivery 

15 to the Java ® program which is the subject of the cancellation 
request, among the Java ® programs registered in the secondary 
storage unit 510. Subsequently, the POD Lib 1205e makes valid 
the message delivery between the POD 504 and the library 1201b 
(more specifically, the program included therein, which has the 

20 same module identifier as the Java ® program which is the subject 
of the cancellation,) of the OS 1201 (step S4005), by carrying out 
the registration accepting the message delivery with the POD 504, 
for the library 1201b of the OS 1201. Here, when the program 
among the programs within the library 1201b of the OS 1201, having 

25 the same module identifier as the Java ® program which is the 
subject of the cancellation is not operating, the same operation 
becomes possible by making valid the message delivery after 
activating the program having the same module identifier. 
[0177] Furthermore, in the case where there are other Java ® 

30 programs registered in the secondary storage unit or there is a 
newly registered Java ® program and the carrying out of message 
delivery with any one of such Java ® programs is desired (or can be 
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carried out), it is also possible to make valid the message delivery 
with the subject Java ® program by carrying out the registration 
accepting message delivery between the POD 504 and the subject 
Java ® program. 

5 [0178] Next, the process in the case where the Java ® 

program abnormally terminates, which is the main topic, shall be 
described. 

[0179] The process in the case where the Java ® program 
3811 abnormally terminates in the state in FIG. 38(b) shall be 

io described. Referring to FIG. 41, the MA management unit 1205f 
detects the abnormal termination, as well as notifies the POD Lib 
1205e of such abnormal termination. FIG. 42 is a flowchart 
summarizing the operation during such time. Processes which are 
the same as those in FIG. 23 are assigned the same reference 

15 numbers, and their description shall be omitted. When the HA 
monitoring unit 2105 detects the abnormal termination of the 
currently monitored monitor application (here, the Java ® program 
3811) (S2301), the MA monitoring unit 2105 ends the monitoring of 
the monitor application which has abnormally terminated (S2302), 

20 and notifies the MA management unit main 2101 of the occurrence 
of the abnormal termination (S2303). The MA management unit 
main 2101 notifies the POD Lib 1205e of the termination of the 
monitor application (S4204). 

[0180] Upon receiving the abnormal termination notification, 
25 the POD Lib 1205e carries out the process for cancelling the 
registration of the message delivery with the Java ® program 3811 
which has abnormally terminated. FIG. 43 is a flowchart 
summarizing the operation during such time. Upon receiving the 
abnormal termination of the Java ® program (S4301), the POD Lib 
30 1205e stops the message delivery between the POD 504 and such 
Java ® program (step S4302) by cancelling (in other words, 
de-registering) the registration of the message delivery between the 
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POD Lib 1205e and such Java ® program. Subsequently, by 
carrying out the registration accepting the message delivery with 
the POD 504 with respect to the library 1201b of the OS 1201, the 
POD Lib 1205e makes valid the message delivery with the library 
5 1201b of the OS 1201 (step S4304). 

[0181] Likewise, description shalf be made for the case where, 
as shown in FIG. 39(b), another Java ® program (here, referring to 
3911) having the same module identifier is stored in the secondary 
storage unit 510. In the case where the Java ® program 3912 

10 abnormally terminates, it is also possible to have the POD Lib 1205e 
register the other Java ® program 3912 having the same module 
identifier, instead of carrying out, with respect to the library 1201b 
of the OS 1201, the registration accepting the message delivery with 
the POD 504. FIG. 44 is a flowchart summarizing the operation 

15 during such time. Processes which are the same as those in FIG. 43 
are assigned the same reference numbers, and their description 
shall be omitted. When the message delivery between the POD 504 
and the Java ® program which has abnormally terminated is 
stopped (step S4302), it is checked whether or not another Java ® 

20 program having the same module identifier exists (S4403). In the 
case where another Java ® program exists (Yes in S4403), such Java 
® program is registered. This registration process follows the 
flowchart shown in FIG. 37, and assumes the process in the case of 
a No in S3702. In the case where another Java ® program does not 

25 exist, the POD Lib 1205e makes valid the message delivery with the 
library 1201b of the OS 1201 (step S4304) by carrying out the 
registration accepting the message delivery with the POD 504, with 
respect to the library 1201b of the OS 1201. 

[0182] Note that even in the case where another Java ® 
30 program having the same module identifier exists, it is also possible 
to carry out the process shown in FIG. 43 (in other words, to transfer 
to the process in S504). 
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[0183] Moreover, although the present embodiment assumes 
that the operation is performed with the PPV subprogram 805 within 
the POD 504 and a Java ® program carrying out the message 
exchange, implementation is possible even for the case where 
5 operation is performed with the message exchange being carried out 
between any subprogram in the POD 504, aside from the PPV, and 
any subprogram in the terminal apparatus 500. Furthermore, 
implementation is also possible even when the Java ® program is a 
mix of a part that is in a form based on a format stipulated in the 

10 Java ® specification and a part in a form that can be directly 
executed by the CPU; as well as when the Java ® program is 
structured only in the form that can be directly executed by the CPU. 
[0184] Note that, although in the present embodiment, details 
regarding the registered Java ® program are stored in the 

15 secondary storage program 510, storage in the primary storage unit 
511 is also possible. 

[0185] According to the present embodiment, even in the case 
where the Java ® program which is registered so as to be able to 
carry out message transmission and reception with the POD 504 
20 abnormally terminates, the POD 504 can continue message 
transmission and reception with a program in the terminal by 
resuming the message transmission and reception with a program in 
the library 1201b of the OS 1201. 

25 Industrial Applicability 

[0186] The program execution device according to the present 
invention is useful in improving the operational stability of a digital 
television receiver and, aside from the digital television receiver, 
can also be applied for the improvement of the operational stability 
30 of information devices controlled through software, such as a 
personal computer, a mobile phone, and the like. 
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